General

  • Target

    2948-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    ba49f31bf42964a422d690c3be7c6746

  • SHA1

    6b671cb7555329d6ffc22dcddcc76d4b9888124b

  • SHA256

    58cab41b5c06c7068007d46d9ac45b2456c361831cb828826239d5ddcbcda9e4

  • SHA512

    8eb20f1ae9b7f718ed108156fbc8614a2ef1291238fcba242c93a29741206909d4f51139284bebd0549967c6982a63b13dcc6eb687b54e2b59486a4609827467

  • SSDEEP

    1536:R5xxfY8LFKSwytAgO9PNzWCM+bbPshJM1HIRKso01blQqdrSAJZABGcDupLW/u1I:78CwgOnFM+bbkQVuKsbnrb4ULWmW9J

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2948-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows x86


    Headers

    Sections